Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.cer (raw, json)
Hash identifier: LKR1nRw8dEO0rkXya/BwSkiOmw6P+KGQd9EgKTrZ750=
Subject key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198CC65817926F5CA0639BC84EC98AD4BCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Aug 2025 11:31:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31019
AS: 50026
AS: 61385
IP: 185.82.184.0/23
IP: 2a05:9280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:65:81:79:26:f5:ca:06:39:bc:84:ec:98:ad:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 11:31:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:2a:20:8e:cd:1f:e7:87:3a:bc:d7:f1:38:
f4:59:0b:e0:76:65:7e:3d:7a:c6:ee:c6:f0:2a:7b:
65:c2:33:68:b7:57:d7:04:33:07:1e:ca:1e:f7:dd:
48:09:b0:d1:fe:09:4b:c1:06:2d:43:e8:89:c6:bb:
75:2e:bc:ab:74:68:e5:77:aa:96:a1:fb:4f:36:65:
31:d2:1b:fb:e3:b5:a1:4c:19:25:4b:48:f4:25:11:
f4:2c:3e:47:f5:48:d7:95:fb:fe:9e:25:b2:4c:f6:
4d:17:d4:d2:fe:ff:67:2f:0e:b1:d4:87:c5:0b:c1:
c4:0c:a0:b2:1a:36:33:c7:b0:b3:3a:01:4a:95:b9:
d7:05:e3:45:85:21:28:18:8b:b9:be:3e:cb:1e:e3:
99:1d:ec:5e:96:2c:21:e0:8f:e9:b9:8c:98:09:e7:
04:44:c6:06:64:57:54:76:32:75:94:ea:29:54:d5:
31:67:25:b5:26:7c:c6:55:38:d1:53:48:5a:72:28:
43:18:6a:36:8d:d8:08:73:32:d3:03:c0:05:29:ac:
dc:a4:19:a5:0f:91:b2:cb:7a:6d:20:38:07:0c:93:
a2:9f:a4:e3:3f:34:cf:1c:04:b8:33:30:69:cb:c7:
94:5c:49:2a:5e:ed:9c:82:d2:91:27:3a:14:4d:a1:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.184.0/23
IPv6:
2a05:9280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31019
50026
61385
Signature Algorithm: sha256WithRSAEncryption
2f:ad:f2:88:d8:18:cf:08:f3:67:52:9c:99:0d:f6:4e:a2:35:
a5:f1:cb:38:6b:11:25:2c:11:67:c9:de:ac:f7:16:da:61:ca:
17:b4:55:18:e6:0d:1f:92:d1:17:d7:0e:cb:c2:98:97:93:e5:
1f:f1:aa:3c:f4:f8:d9:dd:09:fe:94:ab:60:3e:43:b5:1d:2f:
1e:73:69:b9:13:b3:c0:14:ac:a3:e1:19:14:a4:69:7c:96:3b:
6c:cd:c7:49:b1:99:30:46:42:c8:46:48:db:36:46:17:2f:d9:
a5:9e:73:0f:49:04:f4:73:55:29:de:d5:7d:a7:79:9c:ef:35:
4e:bd:8b:1a:17:27:67:9f:c2:a5:13:c9:23:83:a0:67:e2:48:
51:08:4a:c5:bf:10:de:c3:66:bd:83:19:62:1b:02:3b:50:46:
6c:18:7a:6c:89:fb:02:b0:a1:ee:80:c6:a8:ea:a7:4b:32:0e:
b2:6d:f3:38:f1:b5:c3:a3:65:fe:92:29:a6:62:67:f1:0b:61:
f3:9e:9d:17:7a:81:17:1b:62:62:cc:8a:10:47:4d:6e:83:88:
96:9e:26:c5:19:56:07:d7:34:45:5f:35:a8:e4:1c:dc:61:cf:
f3:1b:53:5a:d7:15:03:01:61:07:10:f4:6e:ac:1a:88:f1:45:
dc:fc:09:cb
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZjMZYF5JvXKBjm8hOyYrUvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODIxMTEzMTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjA1ODcxODg5YjlkY2FmZTdlYzMxMzZhZWQxZGRmZWUyZGZiYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC8qII7NH+eHOrzX8Tj0WQvgdmV+
PXrG7sbwKntlwjNot1fXBDMHHsoe991ICbDR/glLwQYtQ+iJxrt1LryrdGjld6qW
oftPNmUx0hv747WhTBklS0j0JRH0LD5H9UjXlfv+niWyTPZNF9TS/v9nLw6x1IfF
C8HEDKCyGjYzx7CzOgFKlbnXBeNFhSEoGIu5vj7LHuOZHexeliwh4I/puYyYCecE
RMYGZFdUdjJ1lOopVNUxZyW1JnzGVTjRU0hacihDGGo2jdgIczLTA8AFKazcpBml
D5Gyy3ptIDgHDJOin6TjPzTPHAS4MzBpy8eUXEkqXu2cgtKRJzoUTaHohQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFMYFhxiJudyv5+wxNq7R3f7i37x9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzYwNDZh
Ni1kZWNiLTQ5YTMtYTNiNC0zMDg3Zjg2YTYzYWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNjA0NmE2
LWRlY2ItNDlhMy1hM2I0LTMwODdmODZhNjNhYi8xL3hnV0hHSW01M0tfbjdERTJy
dEhkX3VMZnZIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQBuVK4MA0EAgACMAcDBQMqBZKAMCMGCCsGAQUF
BwEIAQH/BBQwEqAQMA4CAnkrAgMAw2oCAwDvyTANBgkqhkiG9w0BAQsFAAOCAQEA
L63yiNgYzwjzZ1KcmQ32TqI1pfHLOGsRJSwRZ8nerPcW2mHKF7RVGOYNH5LRF9cO
y8KYl5PlH/GqPPT42d0J/pSrYD5DtR0vHnNpuROzwBSso+EZFKRpfJY7bM3HSbGZ
MEZCyEZI2zZGFy/ZpZ5zD0kE9HNVKd7Vfad5nO81Tr2LGhcnZ5/CpRPJI4OgZ+JI
UQhKxb8Q3sNmvYMZYhsCO1BGbBh6bIn7ArCh7oDGqOqnSzIOsm3zOPG1w6Nl/pIp
pmJn8Qth856dF3qBFxtiYsyKEEdNboOIlp4mxRlWB9c0RV81qOQc3GHP8xtTWtcV
AwFhBxD0bqwaiPFF3PwJyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:45 2025 by rpki-client